drwxrwx--- 2 jon nsadmin nsd running as -u nsadmin -g web
Look at these two facts again. Just a suggestion.